huzaifakhan771/CVE-2020-7471-Django

PoC

PoC for the SQL injection vulnerability in PostgreSQL with Django, found in Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3

view exploit source poc_in_githubauthor huzaifakhan771published 2021-06-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-7471US	critical9.8	65.6% (99th)	Exploit	2020-02-03
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.